---
title: "Create an external score"
method: POST
path: "/crr/external_scores"
tags: ["CRR"]
---

# Create an external score

`POST /crr/external_scores`

Assign an externally sourced risk score to a customer or business

## Request body

- RiskConfigExternalScorePost
  - `description` string — Free-text narrative supplied by the operator or external system describing the rationale for the score.
  - `high_risk_override` boolean — When true, forces the customer's computed CRR rating to high regardless of the numeric score.
  - `metadata` object — Free-form structured metadata supplied by the operator or external system.
  - `resource_id` string, uuid, required — The customer_id or business_id to assign the score to
  - `resource_type` 'BUSINESS' | 'CUSTOMER', required — The resource type for which the parameter is calculated
  - `score` integer, required — An externally sourced risk score (0-100), used directly as condition weight in CRR calculation
  - `tenant` string — The id of the tenant containing the resource. This is relevant for Fintechs that have multiple workspaces.

## Response `201`

Successfully created external score

- RiskConfigExternalScoreResponse
  - `creation_time` string, date-time — The date and time the record was created
  - `description` string — Free-text narrative supplied by the operator or external system describing the rationale for the score.
  - `high_risk_override` boolean, required — When true, forces the customer's computed CRR rating to high regardless of the numeric score.
  - `id` string, uuid, required — Unique identifier for the external score record
  - `last_updated_time` string, date-time — The date and time the record was last updated
  - `metadata` object — Free-form structured metadata supplied by the operator or external system.
  - `resource_id` string, uuid, required — The customer_id or business_id this score applies to
  - `resource_type` 'BUSINESS' | 'CUSTOMER', required — The resource type for which the parameter is calculated
  - `score` integer, required — An externally sourced risk score (0-100)
  - `tenant` string, required — The id of the tenant containing the resource. This is relevant for Fintechs that have multiple workspaces.

## Other responses

- `400` — BadRequest
- `401` — Unauthorized
- `403` — Forbidden error
- `422` — Unprocessable entity request response
- `500` — Internal server error

---

[API](https://skmtc.net/synctera/apis/synctera-api.md) · [All operations](https://skmtc.net/synctera/apis/synctera-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/synctera/synctera-api/revisions/b0d812e6cdd0/schema)